Re: [vserver] vserver security

From: Giovanni Di Stasi <gdistasi_at_gmail.com>
Date: Thu 15 May 2008 - 23:35:23 BST
Message-Id: <200805160035.23401.gdistasi@gmail.com>

Il Friday 16 May 2008 00:28:44 Ed W ha scritto:
> Giovanni Di Stasi wrote:
> > So,
> > would you implement a server to give a few services (dns, webserver,
> > dhcp, etc.) putting each of these services in a different vserver, just
> > to have a system more secure?
>
> Yes - this is normal practice.
>
> Also it's a piece of cake to copy the vserver to backup before testing
> some new config
>
> > What do you think about having a ssh server in each vserver and not in
> > the main context? Is this setup more secure?
>
> This is normal, however watch out for the ssh in the host nabbing all
> the IPs - set it to run only on the host ips in the config
>

Mmmm... but I don't want to run sshd in the host context at all... had you
understood that?
Received on Thu May 15 23:35:41 2008

[Next/Previous Months] [Main vserver Project Homepage] [Howto Subscribe/Unsubscribe] [Paul Sladen's vserver stuff]
Generated on Thu 15 May 2008 - 23:35:42 BST by hypermail 2.1.8